Chat systems like Facebook Messenger, Google Talk, Slack, Skype, and others play a growing role in both our professional and personal lives. Yet few of these systems were designed with user privacy in mind. Most such systems encrypt connections from users to their central servers. These servers handle conversation data in plain-text, which is visible to server operators. Privacy add-ons like Off-The-Record Messaging provide end-to-end encryption that obscures conversation data. But server operators may still collect conversation metadata. In contrast, Tox is a chat system designed from the ground-up to protect user privacy. End-to-end message encryption is built into the system without the need for add-ons. It has no central servers that can collect data or metadata. Instead, messages are routed through a distributed, peer-to-peer network. Tox clients are available for Windows, Macintosh, Linux, Android, and iOS devices. All clients support text chat. Support for extended features (file transfer, voice/video, screen sharing, etc) varies by client.